Schneider Electric Modicon PLCs
ATTENTION: Remotely exploitable/low skill level to exploit.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-6030US | medium6.5 | — | ||
A predictable value range from previous values issue was discovered in Schneider Electric Modicon PLCs Modicon M221, firmware versions prior to Version 1.5.0.0, Modicon M241, firmw… | ||||
| CVE-2017-6028US | critical9.8 | — | ||
An Insufficiently Protected Credentials issue was discovered in Schneider Electric Modicon PLCs Modicon M241, all firmware versions, and Modicon M251, all firmware versions. Log-in… | ||||
| CVE-2017-6026US | critical9.1OT high | Exploit | ||
A Use of Insufficiently Random Values issue was discovered in Schneider Electric Modicon PLCs Modicon M241, firmware versions prior to Version 4.0.5.11, and Modicon M251, firmware… | ||||
references
External citations — patches, advisories, analysis.
remediations (9)
- MitigationModicon M221
Do not grant [network] access to unknown computers
- MitigationModicon M221
Do not grant [network] access to unknown computers
- MitigationModicon M221
Do not grant [network] access to unknown computers
- MitigationModicon M241
Do not grant [network] access to unknown computers
- MitigationModicon M241
Do not grant [network] access to unknown computers
- MitigationModicon M241
Do not grant [network] access to unknown computers
- MitigationModicon M251
Do not grant [network] access to unknown computers
- MitigationModicon M251
Do not grant [network] access to unknown computers
- MitigationModicon M251
Do not grant [network] access to unknown computers
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan